This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/323830333a6439303a3a2f33322d3430203d3e20323732393837.roa
File:                     323830333a6439303a3a2f33322d3430203d3e20323732393837.roa (raw, json)
Hash identifier:          d7G0+m3e5t5w5D9GGYQGFRxUIA1EX2DBmIcVNe5MEcY=
Subject key identifier:   FB:ED:4D:D2:F3:8D:11:F0:3A:BB:66:0B:AF:74:E6:75:BC:3E:F8:BA
Certificate issuer:       /CN=D746D75B817C987CF5174C6C1F75102E45E1979E
Certificate serial:       6EDDF818AED391E035F3C2DE83CF714EC7303377
Authority key identifier: D7:46:D7:5B:81:7C:98:7C:F5:17:4C:6C:1F:75:10:2E:45:E1:97:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D746D75B817C987CF5174C6C1F75102E45E1979E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/323830333a6439303a3a2f33322d3430203d3e20323732393837.roa
Signing time:             Tue 06 Jan 2026 19:43:39 +0000
ROA not before:           Tue 06 Jan 2026 19:38:39 +0000
ROA not after:            Tue 05 Jan 2027 19:43:39 +0000
asID:                     272987
IP address blocks:        2803:d90::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/D746D75B817C987CF5174C6C1F75102E45E1979E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/D746D75B817C987CF5174C6C1F75102E45E1979E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D746D75B817C987CF5174C6C1F75102E45E1979E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:dd:f8:18:ae:d3:91:e0:35:f3:c2:de:83:cf:71:4e:c7:30:33:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D746D75B817C987CF5174C6C1F75102E45E1979E
        Validity
            Not Before: Jan  6 19:38:39 2026 GMT
            Not After : Jan  5 19:43:39 2027 GMT
        Subject: CN=FBED4DD2F38D11F03ABB660BAF74E675BC3EF8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:54:f1:a6:af:9f:73:f4:e9:83:cb:b8:e8:
                    ed:3d:2d:3e:52:a1:f2:72:9e:e2:52:4d:b3:db:20:
                    c1:01:be:0f:36:2a:4c:b9:91:37:3c:70:28:55:c8:
                    11:cb:ec:80:91:b4:17:17:be:29:87:a5:7e:90:93:
                    e5:a8:c1:b5:77:d5:51:97:e3:f2:e9:75:15:9f:4f:
                    b0:ce:32:75:29:60:1c:79:40:b9:4e:28:ed:10:e0:
                    e6:81:21:56:0b:89:b5:88:52:06:be:26:a4:96:50:
                    ac:a0:9f:36:62:6a:fd:7a:33:98:c9:8d:8c:34:f0:
                    86:f5:61:d4:ed:eb:20:7b:69:17:5e:66:a7:38:d2:
                    12:25:4c:c0:b7:b9:bc:52:4a:f4:a3:c4:d9:2d:20:
                    22:d8:d1:a4:d0:88:f2:33:05:95:0a:79:b5:b0:a7:
                    f4:be:36:70:80:a1:1f:a6:c7:21:0d:e5:b9:7c:04:
                    6a:38:36:4a:af:40:37:3e:39:f7:99:58:71:a9:83:
                    6c:fe:9a:a4:c6:76:fe:5b:12:c5:a8:9e:a9:a8:b7:
                    41:e1:bb:00:e3:2b:6e:e0:fa:e2:86:d7:55:c2:98:
                    ef:d3:4b:72:f6:47:0a:25:59:69:79:e1:fc:f7:45:
                    0a:7c:76:d4:54:f6:ad:64:ae:b9:58:0f:d4:f2:3f:
                    7b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:ED:4D:D2:F3:8D:11:F0:3A:BB:66:0B:AF:74:E6:75:BC:3E:F8:BA
            X509v3 Authority Key Identifier:
                keyid:D7:46:D7:5B:81:7C:98:7C:F5:17:4C:6C:1F:75:10:2E:45:E1:97:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/D746D75B817C987CF5174C6C1F75102E45E1979E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D746D75B817C987CF5174C6C1F75102E45E1979E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/323830333a6439303a3a2f33322d3430203d3e20323732393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:6b:3c:a1:90:27:6f:83:d3:80:73:88:2e:35:e9:ca:12:fc:
         01:23:4c:7b:a3:1c:fb:fc:b8:ab:a3:17:f0:96:15:b3:17:54:
         29:48:56:eb:d7:75:24:1f:61:42:97:30:65:38:74:bc:f7:1b:
         cd:1b:ac:ae:75:bf:9b:03:c1:1c:68:35:26:cc:65:b9:09:47:
         72:a8:7d:05:fb:b8:cd:71:d0:e8:e8:eb:6f:9c:a3:14:a6:30:
         81:0d:02:46:09:db:d9:f4:08:f8:e1:ad:63:00:33:87:dd:1a:
         f7:cc:86:48:e6:77:38:a0:3f:30:6d:81:cb:b0:4c:4a:74:12:
         3e:bf:a0:79:5a:23:86:e1:f1:6d:0b:52:41:b3:5f:ea:0b:00:
         67:ad:19:b1:ae:40:34:18:55:09:2c:df:ee:4c:26:9e:40:61:
         05:c2:09:7c:2a:4c:25:7a:37:82:a9:55:df:75:11:bb:5c:dc:
         d9:48:3b:93:86:0d:bc:ff:34:c2:1a:50:09:b0:e6:28:18:21:
         b3:b0:93:de:d6:6e:00:07:59:16:07:fd:0b:21:10:d7:2c:70:
         ef:04:c3:e4:51:4d:d1:0d:d5:ec:ae:7a:94:01:7c:38:12:9c:
         38:c0:2f:07:bc:4d:cd:b2:bb:ab:dd:78:95:d4:19:02:7a:81:
         13:d9:73:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:57:36 2026 by rpki-client